Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138382e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3138382e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          ZV1Uy1TUGH6bnYVJyCLKTkCoe0pyA4Bv3JATLPASv8M=
Subject key identifier:   4D:C5:8B:BA:09:80:8B:2B:D6:5F:18:C6:74:F3:8A:8C:F7:16:FD:AF
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       7EF01427BE8E868ED0CD342D88353CE5932BC229
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138382e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:29 +0000
ROA not before:           Wed 17 Apr 2024 11:37:29 +0000
ROA not after:            Wed 16 Apr 2025 11:42:29 +0000
asID:                     28191
IP address blocks:        186.193.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f0:14:27:be:8e:86:8e:d0:cd:34:2d:88:35:3c:e5:93:2b:c2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:29 2024 GMT
            Not After : Apr 16 11:42:29 2025 GMT
        Subject: CN=4DC58BBA09808B2BD65F18C674F38A8CF716FDAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6b:fa:52:2f:48:42:28:66:6f:ce:0e:e6:07:
                    8f:a3:17:f5:36:39:3d:e4:ef:c8:52:5c:ee:ad:a4:
                    c5:6a:a7:1f:e6:37:c4:b4:70:62:02:49:86:26:04:
                    9e:1a:cc:69:98:5e:a4:84:8a:db:6a:88:43:fc:d1:
                    d0:f7:0e:1b:bd:26:ae:92:91:33:9f:4a:23:2c:b9:
                    da:bf:fb:a3:a1:57:4b:c4:67:b3:b9:2d:f6:49:ca:
                    eb:7c:7d:0b:18:ad:58:ae:ff:20:90:d1:e5:6c:23:
                    c8:41:5c:4d:4d:46:68:a6:e1:b3:81:b4:ea:a2:88:
                    bf:53:65:0d:9b:8e:06:2e:92:04:3e:99:76:87:52:
                    a4:79:f5:0b:b5:cb:6c:5e:5b:49:10:61:53:95:e2:
                    75:97:1e:db:d1:87:1f:57:b5:69:93:4b:2c:e8:d5:
                    ca:43:8f:52:6f:a3:5f:99:b8:07:ff:69:7c:1a:3d:
                    72:52:2c:cc:64:b5:33:48:50:99:79:ed:67:d7:5f:
                    d7:83:aa:b2:5e:72:d1:a4:e9:06:fa:3c:ce:a4:6a:
                    aa:a4:34:42:04:bf:40:41:6b:03:88:08:83:88:e9:
                    5e:7d:68:1a:75:18:6c:17:f9:3f:a4:8b:66:fa:59:
                    3c:e5:cb:68:26:65:68:c2:20:b4:9c:87:87:c3:72:
                    c5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C5:8B:BA:09:80:8B:2B:D6:5F:18:C6:74:F3:8A:8C:F7:16:FD:AF
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138382e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:ab:05:1a:0b:9c:73:ac:d4:4c:bc:61:96:c0:73:64:b4:b4:
         bc:25:9b:19:4d:8e:52:ce:4b:14:fb:d5:e6:22:9b:aa:0d:15:
         b6:6a:cf:90:6c:db:7d:76:db:c4:65:71:e4:b3:32:a5:a6:36:
         af:ac:a7:49:c0:c9:d3:f0:7b:eb:01:dd:c3:ed:27:b4:67:60:
         19:aa:10:e9:6d:d0:10:32:28:89:aa:21:4b:10:45:78:06:83:
         1e:14:49:f5:09:a4:d5:18:8b:b6:71:6c:d2:93:be:5b:15:64:
         ef:6f:48:5d:78:4d:e8:8d:18:1c:c5:30:c7:1d:de:5d:34:dc:
         ad:24:5a:d0:97:61:ce:98:7b:fd:a3:c8:d8:b9:af:0e:a4:3a:
         0e:c1:53:3c:6e:e8:5d:e4:bf:87:ff:b2:88:f0:27:fa:19:c8:
         9f:76:25:f5:4c:02:4a:9e:83:8b:a2:70:8e:07:4a:3e:2e:3f:
         16:40:2b:4a:2e:95:e5:00:69:c6:09:e4:e3:42:09:be:a0:f8:
         e7:e0:09:df:83:fa:a0:0e:61:f1:62:3a:85:66:3f:c3:bb:2e:
         3c:a7:16:43:72:e5:2c:e6:82:c8:a4:5f:ce:72:87:fa:a4:74:
         4a:81:3f:1d:88:b7:47:d4:64:84:58:df:d5:49:27:a4:95:b5:
         92:33:86:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 21:32:27 2024 by rpki-client on console-ams.rpki-client.org